Information Security Auditor - Compliance Specialist

Placements24; Bloemfontein; Hybrid; ZAR 700,000 - 900,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Paid time off

Certifications support

Hybrid work environment

Job summary

Placements24 in Bloemfontein, Free State, seeks an Information Security Auditor to ensure regulatory compliance and strengthen security controls. The role is hybrid, combining in-office collaboration at our Bloemfontein headquarters with remote work flexibility.

You will assess control effectiveness, document findings, and drive remediation with cross-functional teams. The ideal candidate has a Bachelor’s degree in IT/CS/Accounting and at least 4 years of information security auditing

Qualifications

• Bachelor’s degree in IT, CS, accounting or a related field.
• Minimum of 4 years of information security auditing, IT compliance, or risk management.
• Solid understanding of information security principles and frameworks.
• Experience with risk assessments and vulnerability assessments.

Responsibilities

• Plan and execute information security audits to assess compliance with internal policies, industry standards, and regulatory requirements.
• Evaluate the design and operational effectiveness of IT controls.
• Identify security risks and compliance deficiencies with remediation plans.
• Collaborate with IT, internal audit, and business units to facilitate audits and remediation tracking.
• Prepare audit reports with key findings and recommendations.
• Stay current with security threats, regulations and audit best practices.
• Contribute to the organization's risk management framework.
• Conduct follow-up audits to verify control effectiveness.

Skills

Auditing

Information security

Regulatory compliance

Risk assessment

Documentation

Communication

Education

Bachelor’s degree in Information Technology/Computer Science/Accounting

Tools

COBIT

ISO 27001

NIST

SOX

Job description

About the Role Our client, a respected financial institution in Bloemfontein, Free State , is seeking a diligent Information Security Auditor to ensure adherence to regulatory requirements and internal policies. This role is essential for assessing the effectiveness of security controls, identifying compliance gaps, and recommending remediation strategies. The successful candidate will play a vital role in maintaining the integrity and trustworthiness of our client's systems and data. This position offers a hybrid work arrangement, blending remote work flexibility with necessary in-office collaboration in our Bloemfontein headquarters.

Key Responsibilities

• Plan and execute information security audits to assess compliance with internal policies, industry standards (e.g., ISO 27001, PCI DSS), and regulatory requirements (e.g., POPIA).
• Evaluate the design and operational effectiveness of IT controls, including access controls, data security, and incident management processes.
• Identify security risks and compliance deficiencies, documenting findings and proposing actionable remediation plans.
• Collaborate with IT, internal audit, and business units to facilitate audit processes and track remediation efforts.
• Prepare detailed audit reports for management, highlighting key findings and recommendations.
• Stay current with evolving security threats, regulatory landscapes, and audit best practices.
• Participate in the development and improvement of the organization's risk management framework.
• Conduct follow-up audits to verify the effectiveness of implemented controls.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field.
• Minimum of 4 years of experience in information security auditing, IT compliance, or risk management.
• Solid understanding of information security principles, frameworks, and best practices.
• Familiarity with common IT control frameworks such as COBIT, ISO 27001, NIST, and SOX.
• Experience with conducting risk assessments and vulnerability assessments.
• Excellent analytical, documentation, and reporting skills.
• Strong communication and interpersonal skills, with the ability to work effectively with diverse teams.
• Relevant certifications like CISA, CRISC, or CISSP are highly advantageous.

Benefits

• An annual salary of up to ZAR .
• Comprehensive medical aid coverage and a provident fund.
• Paid time off and public holidays.
• Opportunities for professional development and certification support.
• A stable and reputable organization in Bloemfontein .
• Supportive hybrid work environment fostering collaboration and flexibility.